System Tools

snort - Intrusion detection system

Snort is a libpcap-based packet sniffer/logger which
can be used as a lightweight network intrusion detection system.
It features rules based logging and can perform protocol analysis,
content searching/matching and can be used to detect a variety of
attacks and probes, such as buffer overflows, stealth port scans,
CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
Snort has a real-time alerting capabilty, with alerts being sent to syslog,
a seperate "alert" file, or as a WinPopup message via Samba's smbclient

Edit /etc/snort.conf to configure snort and use snort.d to start snort

This rpm is different from previous rpms and while it will not clobber
your current snortd file, you will need to modify it.

There are 9 different packages available

All of them require the base snort rpm.  Additionally, you will need
to chose a binary to install.

/usr/sbin/snort should end up being a symlink to a binary in one of
the following configurations:

plain      plain+flexresp
mysql      mysql+flexresp
postgresql postgresql+flexresp
snmp       snmp+flexresp
bloat      mysql+postgresql+flexresp+snmp

Please see the documentation in /usr/share/doc/snort-2.6.1.1

There are no rules in this package  the license  they are released under forbids
us from repackaging them  and redistributing them.
License:GPL Group:System Tools
URL:http://www.snort.org Source: snort

Packages

Name Version Release Type Size Built
snort 2.6.1.1 4.fc5 i386 3.30 MiB Tue Dec 19 17:08:30 2006

Changelog

* Tue Dec 19 17:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.6.1.1-4
- fix the dynamic engine
* Wed Dec 6 17:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.6.1.1-3
- rebuild for new postgresql
* Thu Nov 30 17:00:00 2006 Dennis Gilmore <dennis{%}ausil{*}us> - 2.6.1.1-2
- rebuild for new libpcap

Listing created by RepoView-0.5.2-1.fc6 (modified)